گزارش آسیب‌پذیری محصولات Cisco

0 99 خواندن این مطلب 3 دقیقه زمان میبرد

?????????? ?? ????? CVE-2023-20154 ? ??? ?????? ? ?????? ??? ?? ??????? ????? ???? ???????. ?? ???? ??? ?????????? ????? ????? ????????? ????? ?????? ?? ???? ??????? ?? ?? ?????? ??????? ?? ????? ????. ?? ????? ???????? ?? ???? ?? ???? ?? ???? ????????? ?? ??? ?????????? ??????????? ???. ??? ????? ???? ??????? ????? ???? ??? ??? ?????? ? ????? ???????? ???? ???? ?????? ? ?? ???????? ???? ???????? ?? ????? ????? ??? ?? ???????? ??????? ?? ???? ?? ???? ?????????? ?? ???? ??????? ?????? ? ????? ?? ????????? ? ??? ???????? ????? ??? ???? ????? ?? ?? ??? ????.
????? ????? ????????? ???? ???????? ???? ?? ?????????? ??? ????? ??????? ????? ????? ?? ???? ??????????????? ????? ?????? ????. ????? ?? ????????? ??? ?????????? ?? ????? ???? ??? ?? ??? ?????????? ?? ????? ??????.
??????? ??? ?????? ?? ????????? LDAP ???????? ??? ????? ??? ????? ??? ???? ????? ???? ????????:

• Modeling Labs for Education

• Modeling Labs Enterprise

• Modeling Labs – Not For Resale

?? ???? ????? ?? ?? ????? ???? ??? ?? ???? ????????? LDAP ???????? ??? ?? ?????? ???:

Tools > System Administration > User Authentication

???? ??? ????? ???:

?????????? ?? ????? CVE-2023-20046 ? ??? ???? ? ?????? ??? ?? ??????? ????? ???? ??? ???. ??? ???? ????? ?? ????? ????????? SSH ????? ?? ???? ?? ????? Cisco StarOS Software ???. ?? ???? ??? ???? ????? ????? ????????? ??? ?? ????? ?? ???? SSH ????? ??? ?? ?????? ????? ?? ????? ?? IP ?? ???? ?? ????? ?? ?????? ???? ??? ? ?????? ???? (source ) ???????? ??? ??? ??????? ??? ???? ????? ?? ???????? ? ?????? ?????? ???. ?? ???????? ???? ?? ????? ?? ????? ????? ??? ?? ?? ???? SSH ?? ????? ?? ????? ?? ?????? ???? ???? ?????? ???? ???? ???.
??????? ????? ?? ?? ???? ???? ???? Cisco StarOS Software ??????? ? ???? ????? ???? ?? SSH ????? ?? ???? ??????? ??????? ?? ??? ???? ??? ???.

• ASR 5000 Series Routers

• Virtualized Packet Core – Distributed Instance (VPC-DI)

• Virtualized Packet Core – Single Instance (VPC-SI)

???? ???? ???? ?????? ????????? ??????? ?? ????? authorized-key ?? server sshd ??????? ???. ??? ????? ???? ?? ?? ??? ????? IP ????? ???? ??????? host ???? ?????? ???? ???????. ?? ???? ??? ????? ?? ???? ??? ???:

[local]host_name(config-sshd)# authorized-key username Administrator1 host 192.168.1.1

[local]host_name(config-sshd)# authorized-key username Operator1 host 192.168.1.1

???? ??? ????? ???:

????? ????? ??? ?? ???? ??? ???? ????? ?? PoC ????? ??? ???.
?????????? ?? ????? CVE-2023-20036 ? ??? ?????? ? ?????? ??? ?? ??????? ????? ???? ??? ???. ??? ?????????? ?? ??? Command Injection ? ?? web UI ????? Cisco Industrial Network Director ???. ?? ????? ???????? ?? ????? ???????? ?? ????? ????? ?? ???? ?? ?????? ????? ??????? ?? ??? ?????????? ??? ??????? ???.
?? ??? ??????? ????? ????? ???? ??? ?? ????? ?? ??????? ??????? ????? ????? Device Pack ??? ???? ????? ?? ???????? ??? ? ?????? ????? ?????? ?? ?????? NT AUTHORITY\SYSTEM ?? ????? ???? ???????? ?????? ???? ???. ??? ?????????? ?? ???? ?????????? ??????? ????? ????? ????? Device Pack ???.
???? ??? ????? ???:

?????????? ?? ????? CVE-2023-20125 ? ??? ???? ? ?????? ??? ?? ??????? ????? ???? ??? ???. ??? ?????????? ?? ????? Cisco BroadWorks Network Server ???. ?? ???? ??? ?????????? ????? ???? ????? ???? ? ?? ??? ??? ????????? ?? ????? ?? ????? ??? ????? ??????? TCP ?? ???? ?? ??? ???? ????? ??? ??????? ???. ?? ??? ??????? ????? ???? ????? ???? ????????? ?? ????? ??????? TCP ???? ???? DoS ????? ???.
????? ????? ???? ??? ?? ??? ???? ??????? ??????? ????? ??? ?? ??? ????? ???? ??? ???:

• BroadWorks Ansible Playbook

• BroadWorks Application Delivery Platform

• BroadWorks Application Server

• BroadWorks Database Server

• BroadWorks Database Troubleshooting Server

• BroadWorks Execution Server

• BroadWorks Media Server

• BroadWorks Messaging Server

• BroadWorks Network Database Server

• BroadWorks Network Function Manager

• BroadWorks Profile Server

• BroadWorks Service Control Function Server